OpenSSL DTLS远程堆溢出漏洞

BUGTRAQ ID: 26055 CVECAN ID: CVE-2007-4995 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL的DTLS支持中存在漏洞，攻击者可以创建能够触发堆溢出的恶意客户端或服务器，导致执行任意指令。 请注意这个漏洞仅影响使用DTLS的应用程序。 OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 RedHat Linux 5.0 OpenSSL Project ---------------...

Core Security Technologies Advisory 2007.0817

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...

Sun Java JRE Font Parsing Privilege Escalation (103024)

According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly contains an issue in its font parsing code that may allow an untrusted applet to gain elevated privileges and, for example read or write local files or execute local applications...

Symantec Enterprise Firewall and Symantec Gateway Security Username Enumeration

SUMMARY Symantec Enterprise Firewall username information can be verified through an exposure in the login interface. Severity Low Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Product | Version | Build | Solutions...

Help Center Live class/auth.php check_logout Function Admin Authentication Bypass

The remote host is running Help Center Live, an open source, web-based help desk application written in PHP. The version of Help Center Live installed on the remote host has several administrative scripts that fail to exit if called without valid credentials. An unauthenticated attacker may be ab...

Sun Solaris底带宽X代理信息泄露漏洞

BUGTRAQ ID: 25070 CNCAN ID:CNCAN-2007080108 Solaris是一款Sun公司开发的UNIX操作系统。 Solaris底带宽代理lbxproxy1存在安全问题，本地攻击者可以利用漏洞获得敏感信息。 本地非特权用户可以读取ROOT属性的任意文件数据信息，导致敏感信息泄露。 Sun Solaris 10.0 x86 Sun Solaris 10.0 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 升级程序： Sun Solaris 9x86 Sun 112786-51...

Security Advisory: Login bypass in LedgerSMB 1.2.0 through 1.2.6

A security issue has been found which allows an unauthenticated user to bypass the authentication system in LedgerSMB 1.2.0 through 1.2.6. Severity: Highly Critical Versions affected: 1.2.0 through 1.2.6 Status: Vendor solution available upgrade to 1.2.7 Effect: Authentication bypass. Required...

Clarifications on LedgerSMB vulnerability with Bugtraq ID:24940

Hi all; The LedgerSMB team is still working on a security advisory which details the exact nature of the security vulnerability, how to test for it, etc. We are giving it a couple days to ensure that it is correct and well edited, and that administrators have a chance to upgrade before the exploi...

squirrel-exec.txt

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

No description provided by source. SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t...

Microsoft Excel版本信息验证内存破坏漏洞（MS07-036）

BUGTRAQ ID: 24801 CVECAN ID: CVE-2007-1756 Microsoft Excel是Office套件中的电子表格工具。 Excel在处理畸形格式的文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户打开处理畸形文件控制用户系统。 Excel没有正确地验证版本信息，如果用户受骗打开了畸形的Excel文件的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Excel 2007 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP2 Microso...

SquirrelMail GPGP Encryption Plugin 2.0 - Command Execution

SquirrelMail GPGP Encryption Plugin 2.0 - Command Execution SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from...

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

SquirrelMail G/PGP Encryption Plugin 2.0 - Command Execution

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

Exploit for unknown platform in category web applications ================================================================ SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln ================================================================ SquirrelMail G/PGP Encryption Plug-in Remote...

MDaemon Server DomainPOP Malformed Message DoS

According to its banner, the version of MDaemon installed on the remote host contains a vulnerability in its 'DomainPOP' Mail Collection component that may cause it to crash while processing a specially crafted message. An unauthenticated, remote attacker may be able to leverage this issue to den...

Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow

The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving the 'wcscpy' function of the routine 'CAgRpcClient::CreateBinding' in AgRpcCln.dll library. An unauthenticated, remote attacker may be able to leverage this issue with specially crafted RPC requests to its...

HP Tru64 5.0.1 - DOP Command Privilege Escalation

HP Tru64 5.0.1 - DOP Command Privilege Escalation source: https://www.securityfocus.com/bid/23881/info HP Tru64 for UNIX is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits wi...

PHP Msg_Receive()内存分配整数溢出漏洞

BUGTRAQ ID: 23236 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的msgreceive函数实现上存在整数溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 PHP的msgreceive函数没有对maxsize参数执行任何检查便直接在内存分配中使用，导致整数溢出。有漏洞的代码如下： PHPFUNCTIONmsgreceive ... if zendparseparametersZENDNUMARGS TSRMLSCC, "rlzlz|blz", &queue, &desiredmsgtype, &outmsgtype,...

[SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw

------------------------------------------------------------------------ Debian Security Advisory DSA-1275-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : zope2.7 Vulnerability...